General

  • Target

    2024-05-28_9d404a2b65148b9b2e6db578afcbd916_ryuk

  • Size

    2.2MB

  • Sample

    240528-wy26vseh3z

  • MD5

    9d404a2b65148b9b2e6db578afcbd916

  • SHA1

    b0be5356b5f3102aa9765f3bb2b4d74665dc2117

  • SHA256

    b1f656b58c90e11335ffe59002f6736d6df9bfa4900457fd20e2ebbc5fdf9c77

  • SHA512

    c5ca2a85793bf721f1ec33b8e897937d9b002b43b868bc62fc4a902077c4d967253ff8ae9f850607cf8171a5760564dc84b9a3699224b3a9902060d590cdcbed

  • SSDEEP

    24576:POObVw4TaN1wdkukCba4oXtgLhU3wEdmh589TduSZpUR0GHrVQ1aW4mSOgv3isi:POOh3aN4kuLbegmtGspAHrVQ1/fSNvi

Score
7/10

Malware Config

Targets

    • Target

      2024-05-28_9d404a2b65148b9b2e6db578afcbd916_ryuk

    • Size

      2.2MB

    • MD5

      9d404a2b65148b9b2e6db578afcbd916

    • SHA1

      b0be5356b5f3102aa9765f3bb2b4d74665dc2117

    • SHA256

      b1f656b58c90e11335ffe59002f6736d6df9bfa4900457fd20e2ebbc5fdf9c77

    • SHA512

      c5ca2a85793bf721f1ec33b8e897937d9b002b43b868bc62fc4a902077c4d967253ff8ae9f850607cf8171a5760564dc84b9a3699224b3a9902060d590cdcbed

    • SSDEEP

      24576:POObVw4TaN1wdkukCba4oXtgLhU3wEdmh589TduSZpUR0GHrVQ1aW4mSOgv3isi:POOh3aN4kuLbegmtGspAHrVQ1/fSNvi

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks